Written in Visual Basic

Released in August 2006

Made in The Middle East

Server:
dropped file:
c:\Documents and Settings\%user%\Local Settings\Temp\nisnjqvmm.exe
size: 137,216 bytes 

c:\Documents and Settings\%user%\Local Settings\Temp\IXP000.TMP\System.exe
size: 102,400 bytes 	
	
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "wextract_cleanup0"



tested on Windows XP
November 09, 2006